package com.atguigu.gulimall.seckill.interceptor;

import com.atguigu.common.constant.AuthServerConstant;
import com.atguigu.common.vo.MemberRespVo;
import org.springframework.stereotype.Component;
import org.springframework.util.AntPathMatcher;
import org.springframework.web.servlet.HandlerInterceptor;

import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

/**
 * @Author : Jungle
 * @Description :
 */
@Component
public class LoginUserInterceptor implements HandlerInterceptor {
    public static ThreadLocal<MemberRespVo> threadLocal = new ThreadLocal<>();

    @Override
    public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception {
        ///order/order/status/{orderSn}  这个路径要设置无需登录，远程库存查询订单的，不能拦截
        //StringBuffer requestURL = request.getRequestURL();
        //uri 不加服务器前缀，url需要加上比如 http://gulimall.com
        String uri = request.getRequestURI();
        boolean match = new AntPathMatcher().match("/kill", uri);
        //只用拦截 /kill  必须要登录，前端限制，后台也要做限制
        if (match) {
            MemberRespVo attribute = (MemberRespVo) request.getSession().getAttribute(AuthServerConstant.LOGIN_USER);
            if (attribute != null) {
                //保存登录的用户
                threadLocal.set(attribute);
                return true;
            } else {
                //没登录就去登录
                request.getSession().setAttribute("msg", "请先进行登录");
                response.sendRedirect("http://auth.gulimall.com/login.html");
                return false;
            }
        }
        //其他的请求放行
        return true;



    }
}
